IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity.
総合評価: CVE-2023-20584 は低リスク（23.6/100）。CVSS 深刻度は中。悪用される可能性が高い（EPSS 0.17%、7 パーセンタイル） 推奨対応: 悪用情報と EPSS の推移を監視し、必要に応じて優先度を見直してください。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置（高いほど相対的に深刻）を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.02% | 0.17% | +0.15% |
| 2 | 2025-11-21 | 0.05% | 0.02% | -0.04% |
| 3 | 2025-11-18 | — | 0.05% | — |
EPSS の全履歴 （全 4 件）
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 5.3 | 3.1 | MEDIUM |
|
0.8 | 4.0 | [email protected] |
| 6.0 | 3.1 | MEDIUM |
|
1.5 | 4.0 | [email protected] |
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2023-20584 not yet assigned priority: Debian including 1 source packages (amd64-microcode), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. | https://security-tracker.debian.org/tracker/CVE-2023-20584 |
redhat
|
medium | — | https://access.redhat.com/security/cve/CVE-2023-20584 |
suse
|
medium | CVE-2023-20584 severity moderate: SUSE including 62 source package names (cluster-md-kmp-default, dlm-kmp-default, …), 255 product×package rows across 44 product lines (SUSE Liberty Linux 8, SUSE Liberty Linux 9, … (44 product lines)): Known Not Affected 217, Fixed 38. | https://www.suse.com/security/cve/CVE-2023-20584/ |
ubuntu
|
medium | CVE-2023-20584 medium priority: Ubuntu including 1 source packages (amd64-microcode), 9 status rows across 9 suites (bionic, focal, jammy, noble, oracular, plucky, trusty, upstream, xenial): not-affected 6, released 3. | https://ubuntu.com/security/CVE-2023-20584 |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| amd | epyc_8024pn_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8024p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8124pn_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8124p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8224pn_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8224p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8324pn_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8324p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8434pn_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8434p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8534pn_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_8534p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9734_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9754s_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9754_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9184x_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9384x_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9684x_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9124_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9174f_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9224_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9254_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9274f_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9334_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9354_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9354p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9374f_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9454_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9454p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9474f_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9534_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9554_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9554p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9634_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9654_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_9654p_firmware | < genoapi_1.0.0.b | cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7203_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7203p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_72f3_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7303_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7303p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7313_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7313p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7343_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_73f3_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7373x_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7413_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7443_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7443p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_74f3_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7453_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7473x_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7513_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7543_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7543p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_75f3_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7573x_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7643_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7773x_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7643p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7663_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7663p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7713_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7713p_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7763_firmware | < milanpi_1.0.0.b | cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* |
| URL | タグ |
|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html | Vendor Advisory |